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IN THE CLAIMS 
Please amend the claims as follows: 

1 . (Currently Amended) An apparatus for encrypting block data of a first bit length 
size-comprising: 

encrypting sections connected in series, each of the encrypting sections comprising, 
first units each configured to randomize first subblock data of a second bit length size 
which are obtained by dividing the block data of the first bit length size, and 

a second unit configured to receive plural items of the randomized first subblock data 
output from the first units, the received plural items of the randomized first subblock data 
being of the first bit length, to diffuse the received plural items of the randomized first 
subblock data of the first bit length a group of data which is of the first siz e and is output 
from th e first units and to supply a result of diffusion to first units in a succeeding encrypting 
section, and wherein th e first units and the s e cond unit ar e configur e d to conn e ct at l e ast on e 
input bit t e rminal of th e first units to on e input bit t e rminal of th e corr e sponding first unit 
each of the first units comprises 

first subunits each configured to randomize second subblock data of a third bit 
length which are obtained by dividing the first subblock data of the second bit length, 
a second subunit configured to receive plural items of the randomized second 
subblock data output from the first subunits, the received plural items of the 
randomized second subblock data being of the second bit length and to diffuse the 
received plural items of the randomized second subblock data of the second bit length, 
and 

third subunits configured to receive the diffused second subblock data of the 
second bit length which is output from the second subunit and each configured to 
randomize the second subblock data of the third bit length, and 
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wherein any one of the first subunits is connected to any one of the first 

subunits in the succeeding encrypting section via at least two paths. 

2 (Canceled). 

3 (Canceled). 

4. (Currently Amended) An apparatus for encrypting block data of a first bit length 
size, the apparatus comprising: 

encrypting sections connected in series, each of the encrypting sections comprising, 
first nonlinear transformation units each configured to perform a nonlinear 
transformation process for first subblock data of a second bit length size which are obtained 
by dividing the block data of the first bit length size, and 

a first linear diffusion unit configured to receive plural items of the processed first 
subblock data output from the first nonlinear transformation units, the received plural items 
of the processed fist subblock data being of the first bit length, to perform a linear diffusion 
process for the received plural items of the processed first subblock data of the first bit length 
a lin e ar diffusion proc e ss for a group of th e first subblock data which is of the first size and is 
output from the first nonlin e ar transformation units and to supply a result of the linear 
diffusion process to first nonlinear transformation units in a succeeding encrypting section, 
wherein each of the first nonlinear transformation units comprises, 
second nonlinear transformation units each configured to perform a nonlinear 
transformation process for second subblock data of a third bit length size which are obtained 
by dividing the first subblock data of the second bit length -size, and 
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a second linear diffusion unit configured to receive plural items of the processed 
second subblock data output from the second nonlinear transformation units, the received 
plural items of the processed second subblock data being of the second bit length and to 
perform a linear diffusion process for a group of the received plural items of the processed 
second subblock data, which is of th e third siz e and is output from th e second nonlinear 
transformation units, and 

third nonlinear transformation units configured to receive the processed second 
subblock data of the second bit length which is output from the second linear diffusion unit 
and each configured to perform a nonlinear transformation process for second subblock data 
of the third bit length, 

wherein th e first nonlinear transformation units, the first lin e ar diffusion unit, th e 
s e cond nonlin e ar transformation units, and th e s e cond lin e ar diffusion unit ar e configur e d to 
conn e ct at l e ast on e input bit t e rminal of the first nonlin e ar transformation units to on e input 
bit t e rminal of th e corr e sponding first nonlin e ar transformation units any one of the second 
nonlinear transformation units is connected to any one of the second nonlinear transformation 
units in the succeeding encrypting section via at least two paths. 

5. (Canceled) 

6. (Canceled) 
7 (Canceled). 

8. (Currently Amended) The apparatus according to claim 4, wherein the block data 
first bit length is 128 bits in l e ngth , e ach of the first subblock data the second bit length is 32 
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bits^ in length and the third bit length is 8 bits . 

9. (Currently Amended) The apparatus according to claim 4, wherein the first linear 
diffusion unit and the second linear diffusion unit are [[is]] implemented by hardware. 

10. (Currently Amended) The apparatus according to claim 9, wherein an input-output 
characteristic of the first linear diffusion unit and the second linear diffusion unit are [[is]] 
based on multiplication in a Galois field. 

11. (Currently Amended) The apparatus according to claim [[5]] 4, wherein the first 
linear diffusion unit and the second linear diffusion unit are [[is]] implemented by software. 

12. (Currently Amended) An apparatus for encrypting block data of 128 bits, the 
apparatus comprising: 

encrypting sections connected in series, each of the encrypting sections including, 
four first nonlinear transformation units each configured to perform a nonlinear 

transformation process for first subblock data of 32 bits which are obtained by dividing the 

block data, and 

a first linear diffusion unit configured to receive plural items of the processed first 
subblock data output from the four first nonlinear transformation units, to perform a linear 
diffusion process using a maximum distanc e s e parabl e matrix for a group of the received 
plural items of the processed first subblock data of 32 bits th e first subblock data of 128 bits 
output from th e four first nonlin e ar transformation units and to supply a result of the linear 
diffusion process to four first nonlinear transformation units in a succeeding encrypting 
section; 

a key addition unit which adds key data of 128 bits to output data of 128 bits from the 
encrypting section of a last stage, 
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wherein an encrypting section of the last stage comprises four nonlinear 
transformation units each configured to perform a nonlinear transformation process for the 
first subblock data of 32 bits, 

wherein each of the first nonlinear transformation units includes stage sections, each 
stage section including, 

four second nonlinear transformation units each configured to perform a nonlinear 
transformation process for second subblock data of 8 bits which are obtained by dividing the 
first subblock data, 

a second linear diffusion unit configured to receive plural items of the processed 
second subblock data output from the four second nonlinear transformation units, the 
received plural items of the processed second subblock data being 32 bits in length, and to 
perform a linear diffusion process for a group of the received plural items of the processed 
second subblock data A of 32 bits output from th e s e cond nonlin e ar transformation units, and 

third nonlinear transformation units configured to receive the processed second 
subblock data which is output from the second linear diffusion unit and each configured to 
perform a nonlinear transformation process for second subblock data being 8 bits in length, 
and 

an adder for adding a key to four second subblock data of 8 bits input to the four 
second nonlinear transformation units, 

wherein a stage section of the last stage comprises four second nonlinear 
transformation units each configured to perform a nonlinear transformation process for the 
second subblock data; 

wherein th e first nonlin e ar transformation units, the first linear diffusion unit, the 
s e cond nonlin e ar transformation units, and the s e cond lin e ar diffusion unit ar e configur e d to 
conn e ct at l e ast on e input bit t e rminal of th e first nonlin e ar transformation units to one input 
bit t e rminal of th e corr e sponding first nonlinear transformation units any one of the four 
second nonlinear transformation units is connected to any one of the four second nonlinear 
transformation units in the succeeding encrypting section via at least two paths, and 

wherein each of the four first nonlinear transformation units divides input data of 32 
bits into eight groups of data of 4 bits which are formed of extracting the input data by every 
8 bits, and the first linear diffusion unit comprises eight subunits each subunit receiving 
corresponding four groups of data of 4 bits output from the four first nonlinear transformation 
units, performing a 4 x 4 matrix operation based on multiplication over a Galois field GF(2 4 ) 
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for the received four groups of data of 4 bits, and outputting four groups of data of 4 bits to 
corresponding four first nonlinear transformation units of the succeeding encrypting section. 

13. (Currently Amended) An apparatus for encrypting block data of 64 bits, the 

apparatus comprising: 

encrypting sections connected in series, each of the encrypting sections including, 
two first nonlinear transformation units each configured to perform a nonlinear 

transformation process for first subblock data of 32 bits which are obtained by dividing the 

block data, and 

a first linear diffusion unit configured to receive plural items of the processed first 
subblock data output from the two first nonlinear transformation units, perform a linear 
diffusion process using a maximum distanc e s e parable matrix for a group the received plural 
items of the processed first subblock data of 32 bits of th e first subblock data, of 6 4 bits 
output from th e two first nonlin e ar transformation unit s and to supply a result of the linear 
diffusion process to two first nonlinear transformation units in a succeeding encrypting 
section; 

a key addition unit which adds key data of 128 bits to output data of 64 bits from the 
encrypting section of a last stage, 

wherein an encrypting section of the last stage comprises two nonlinear 
transformation units each configured to perform a nonlinear transformation process for the 
first subblock data of 32 bits, 

wherein each of the first nonlinear transformation units includes stage sections, each 
stage section including, 

four second nonlinear transformation units each configured to perform a nonlinear 
transformation process for second subblock data of 8 bits which are obtained by dividing the 
first subblock data, 

a second linear diffusion unit configured to receive plural items of the processed 
second subblock data output from the four second nonlinear transformation units, the 
received plural items of the processed second subblock data being 32 bits in length, and to 
perform a linear diffusion process for a group of the received plural items of the processed 
second subblock data being 32 bits in length, th e second subblock data of 32 hitr . output from 
th e s e cond nonlin e ar transformation units, and 
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third nonlinear transformation units configured to receive the processed second 
subblock data which is output from the second linear diffusion unit and each configured to 
perform a nonlinear transformation process for second subblock data being 8 bits in length, 
and 

an adder for adding a key to four second subblock data of 8 bits input to the four 
second nonlinear transformation units, 

wherein a stage section of the last stage comprises four second nonlinear 
transformation units each configured to perform a nonlinear transformation process for the 
second subblock data, 

wherein the first nonlin e ar transformation units, tho first linear diffusion unit, th e 
s e cond nonlinear transformation units, and th e s e cond lin e ar diffusion unit ar e configur e d to 
conn e ct at l e ast on e input bit t e rminal of th e first nonlin e ar transformation units to on e input 
bit t e rminal of th e corr e sponding first nonlin e ar transformation units any one of the four 
second nonlinear transformation units is connected to any one of the four second nonlinear 
transformation units in the succeeding encrypting section via at least two paths, and 

wherein each of the two first nonlinear transformation units divides input data of 32 
bits into eight groups of data of 4 bits which are formed of extracting the input data by every 
8 bits, and the first linear diffusion unit includes eight subunits each subunit receiving 
corresponding two groups of data of 4 bits output from the two first nonlinear transformation 
units, performing a 2 x 2 matrix operation based on multiplication over a Galois field GF(2 4 ) 
for the received two groups of data of 4 bits, and outputting two groups of data of 4 bits to 
corresponding two first nonlinear transformation units of the succeeding encrypting section. 

14. (Currently Amended) A method for encrypting block data of a first stae bit length 
comprising: 

randomizing each of first subblock data of a second siz e which ar e obtain e d by 
dividing th e block data of th e first size; 

diffusing a group of tho randomiz e d data of th e first size; andr e p e ating th o 
randomizin g, th e r e ci e vint, and the diffusing. 
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randomizing first subblock data of a second bit length which are obtained by dividing 
the block data of the first bit length; 

receiving plural items of the randomized first subblock data, the received plural items 
of the randomized first subblock data being of the first bit length; 

diffusing the received plural items of the randomized first subblock data of the first bit 
length; and 

repeating the randomizing, the receiving, and the diffusing, 

wherein at least one bit input to the randomizing operation is transmitted to the next 
randomizing operation via at least two paths. 

15. (Currently Amended) An article of manufacture comprising a computer readable 
medium including a computer program embodied therein, the computer program comprising: 

computer readable program cod e m e ans for causing a comput e r to randomiz e e ach of 
first subblock data of a s e cond siz e which ar e obtain e d by dividing plaint e xt block data of a 
first siz e ; 

comput e r r e adabl e program code moans for causing a computer to diffus e a group of 
th e randomiz e d data of th e first siz e ; and 

computer readable program cod e means for causing a comput e r to repeat the 
randomizing and th e diffusing, wh e r e in at l e a s t on e bit input to th e randomizing operation is 
transmitt e d to th e n e xt randomizing op e ration via at least two randomizing and diffusing 
paths 

computer readable program code means for causing a computer to randomize first 
subblock data of a second bit length which are obtained by dividing the block data of a first 
bit length; 
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computer readable program code means for causing a computer to receive plural items 
of the randomized first subblock data, the received plural items of the randomized first 
subblock data being of the first bit length; 

computer readable program code means for causing a computer to diffuse the received 
plural items of the randomized first subblock data of the first bit length; and 

computer readable program code means for causing a computer to repeating the 
randomizing, the receiving, and the diffusing, 

wherein at least one bit input to the randomizing operation is transmitted to the next 
randomizing operation via at least two paths. 

16. (Currently Amended) An apparatus for decrypting encrypted block data of a first 
bit length, the apparatus comprising: 

decrypting sections connected in series, each of the decrypting sections comprising, 

first units each configured to randomize first subblock data of a second bit length size 
which are obtained by dividing encrypted block data of the first bit length size, and 

a second unit configured to receive plural items of the randomized first subblock data 
output from the first units, the received plural items of the randomized first subblock data 
being of the first bit length, to diffuse the received plural items of the randomized first 
subblock data of the first bit length a group of data which is of th e first size and is output 
from th e first units and to supply a result of diffusion to first units in a succeeding e ncrypting 
decrypting section, and wherein the first units and th e s e cond unit ar e configur e d to connect 
at l e ast on e input bit t e rminal of th e first units to on e input bit terminal of the corr e sponding 
first unit each of the first units comprises 

first subunits each configured to randomize second subblock data of a third bit 

length which are obtained by dividing the first subblock data of the second bit length. 
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a second subunit configured to receive plural items of the randomized second 

subblock data output from the first subunits, the received plural items of the 

randomized second subblock data being of the second bit length and to diffuse the 

received plural items of the randomized second subblock data of the second bit length, 

and 

third subunits configured to receive the diffused second subblock data of the 
second bit length which is output from the second subunit and each configured to 
randomize the second subblock data of the third bit length, and 
wherein any one of the first subunits is connected to any one of the first subunits in 
the succeeding e ncrypting decrypting section via at least two paths. 

17. (Currently Amended) A method for decrypting encrypted block data of a first bit 
length size, the method comprising: 

randomizing first subblock data of a s e cond size which ar e obtain e d by dividing the 
e ncrypt e d block data of the first siz e ; 

diffusing a group of the randomiz e d data of the first size; and 

r e p e ating the randomizing and th e diffusing, 

randomizing first subblock data of a second bit length which are obtained by dividing 
the block data of the first bit length; 

receiving plural items of the randomized first subblock data, the received plural items 
of the randomized first subblock data being of the first bit length; 

diffusing the received plural items of the randomized first subblock data of the first bit 
length; and 

repeating the randomizing, the receiving, and the diffusing, 
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wherein at least one bit input to the randomizing operation is transmitted to the next 

randomizing operation via at least two paths. 

18. (Currently Amended) An article of manufacture comprising a computer readable 
medium including a computer program embodied therein, the computer program comprising: 

comput e r r e adabl e program codo moans for causing a comput e r to randomiz e first 
subblock data of a second size which aro obtained by dividing oncryptod block data of a first 
siz e ; 

comput e r readable program cod e means for causing a comput e r to diffus e a group of 
the randomiz e d data of th e first siz e ; and 

comput e r r e adabl e program cod e m e ans for causing a comput e r to r e p e at th e 
randomizing and th e diffusing, 

computer readable program code means for causing a computer to randomize first 
subblock data of a second bit length which are obtained by dividing the block data of a first 
bit length; 

computer readable program code means for causing a computer to receive plural items 
of the randomized first subblock data, the received plural items of the randomized first 
subblock data being of the first bit length; 

computer readable program code means for causing a computer to diffuse the received 
plural items of the randomized first subblock data of the first bit length; and 

computer readable program code means for causing a computer to repeating the 
randomizing, the receiving, and the diffusing, 

wherein at least one bit input to the randomizing operation is transmitted to the next 
randomizing operation via at least two paths. 
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